| # |
id |
event_time |
event_name |
aws_region |
source_ip |
username |
instance_id |
principal_id |
trace_id |
raw_event |
| 1 |
1 |
2023-03-21 20:11:52.123042 +00:00 |
StopInstances |
us-west-2 |
96.2.2.91 |
isrjlypi |
i-442458b2 |
AIDVAPHSPDMRWFT |
d9f1a992-fcb0-4c81-b59b-0ad7bcfc22f3 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDVAPHSPDMRWFT | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/isrjlypi | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | isrjlypi | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-05-28T20:11:52.123009Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDSTVURSUGUEWR | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/yxvaezuz | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | yxvaezuz |
|
|
| | eventTime $.raw_event.eventTime + | 2023-03-21T20:11:52.123042Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 96.2.2.91 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-442458b2 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-442458b2 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2025-01-02T20:11:52.123178Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 4 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 119 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 895 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3635 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2266 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-442458b2 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | d9f1a992-fcb0-4c81-b59b-0ad7bcfc22f3 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 2 |
2 |
2023-03-16 20:11:52.123400 +00:00 |
RebootInstances |
us-east-1 |
59.15.181.63 |
tcdjmqxc |
i-13e728a6 |
AIDULHHCBTGJCEX |
c5026268-f271-4520-92c5-e37351ba1014 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDULHHCBTGJCEX | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/tcdjmqxc | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | tcdjmqxc | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-07-20T20:11:52.123390Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDOEHPKJUXRBPL | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/xtesvrun | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | xtesvrun |
|
|
| | eventTime $.raw_event.eventTime + | 2023-03-16T20:11:52.123400Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 59.15.181.63 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-13e728a6 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-13e728a6 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-01-15T20:11:52.123476Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 45 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 74 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 349 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2113 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2145 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-13e728a6 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | c5026268-f271-4520-92c5-e37351ba1014 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 3 |
3 |
2022-10-14 20:11:52.123749 +00:00 |
StartInstances |
us-east-1 |
5.193.233.162 |
hkyzutzz |
i-9fef0e60 |
AIDWUZSKEIMXNHX |
75d98fdc-1986-43ee-a1c7-f4af114e4094 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDWUZSKEIMXNHX | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/hkyzutzz | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | hkyzutzz | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-06-25T20:11:52.123738Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDDWDIJCFICEWJ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/kmjfurzi | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | kmjfurzi |
|
|
| | eventTime $.raw_event.eventTime + | 2022-10-14T20:11:52.123749Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 5.193.233.162 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-9fef0e60 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-9fef0e60 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-12-08T20:11:52.123853Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 1 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 69 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 580 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2879 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2435 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-9fef0e60 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 75d98fdc-1986-43ee-a1c7-f4af114e4094 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 4 |
4 |
2024-01-23 20:11:52.124057 +00:00 |
StartInstances |
eu-west-1 |
235.9.42.34 |
kgodpmso |
i-f901eb58 |
AIDRYTNDADZBKTT |
decb3350-236b-4e82-ac85-47895a43c39d |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDRYTNDADZBKTT | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/kgodpmso | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | kgodpmso | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2025-02-08T20:11:52.124043Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDQAYSBGIKSEGI | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/dbajyuis | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | dbajyuis |
|
|
| | eventTime $.raw_event.eventTime + | 2024-01-23T20:11:52.124057Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 235.9.42.34 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-f901eb58 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-f901eb58 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-07-05T20:11:52.124135Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 45 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 318 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 106 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2053 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4138 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-f901eb58 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | decb3350-236b-4e82-ac85-47895a43c39d | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 5 |
5 |
2023-07-07 20:11:52.124339 +00:00 |
RebootInstances |
us-east-1 |
12.153.22.179 |
kxyfphko |
i-875dd5cb |
AIDYVMVTJCQUZKQ |
45e3ee03-0e55-46cb-8b1f-174118b3ba42 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDYVMVTJCQUZKQ | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/kxyfphko | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | kxyfphko | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-07-02T20:11:52.124323Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDUMIHTCLNXGJI | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/hwjcyipp | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | hwjcyipp |
|
|
| | eventTime $.raw_event.eventTime + | 2023-07-07T20:11:52.124339Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 12.153.22.179 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-875dd5cb |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-875dd5cb | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-03-16T20:11:52.124397Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 47 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 178 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 687 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4825 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1442 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-875dd5cb | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 45e3ee03-0e55-46cb-8b1f-174118b3ba42 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 6 |
6 |
2022-10-03 20:11:52.124560 +00:00 |
RebootInstances |
eu-west-1 |
164.56.172.134 |
hiakglgt |
i-6829314a |
AIDYZUNDZHOMRNW |
8ff5daa7-cb91-4546-8b97-41e90ca875e9 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDYZUNDZHOMRNW | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/hiakglgt | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | hiakglgt | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-07-22T20:11:52.124551Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDLQSQJRMPLRIZ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/gicjppcx | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | gicjppcx |
|
|
| | eventTime $.raw_event.eventTime + | 2022-10-03T20:11:52.124560Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 164.56.172.134 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-6829314a |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-6829314a | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-10-12T20:11:52.124635Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 49 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 374 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 410 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2674 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2145 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-6829314a | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 8ff5daa7-cb91-4546-8b97-41e90ca875e9 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 7 |
7 |
2024-04-04 20:11:52.124808 +00:00 |
StartInstances |
us-east-1 |
109.115.234.34 |
qgyctais |
i-52b9b187 |
AIDATEMOQAUXMHO |
ffe4bb33-cd0e-4d48-b5f7-567ca3bf3a26 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDATEMOQAUXMHO | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/qgyctais | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | qgyctais | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-04-15T20:11:52.124799Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDYPZZAKDGZINA | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/utguppxw | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | utguppxw |
|
|
| | eventTime $.raw_event.eventTime + | 2024-04-04T20:11:52.124808Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 109.115.234.34 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-52b9b187 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-52b9b187 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-07-08T20:11:52.124944Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 75 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 45 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 756 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4244 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2860 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-52b9b187 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | ffe4bb33-cd0e-4d48-b5f7-567ca3bf3a26 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 8 |
8 |
2024-01-03 20:11:52.125173 +00:00 |
RebootInstances |
eu-west-1 |
86.198.24.167 |
hcnepmyc |
i-0e2bd482 |
AIDLVEURORHVXKE |
7a785fce-8e60-41c8-a5a9-fd21a3435f49 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDLVEURORHVXKE | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/hcnepmyc | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | hcnepmyc | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-12-28T20:11:52.125161Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDRSKNAIYDMAGE | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/dozbgmlo | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | dozbgmlo |
|
|
| | eventTime $.raw_event.eventTime + | 2024-01-03T20:11:52.125173Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 86.198.24.167 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-0e2bd482 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-0e2bd482 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-09-14T20:11:52.125242Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 13 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 427 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 800 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 1881 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3061 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-0e2bd482 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 7a785fce-8e60-41c8-a5a9-fd21a3435f49 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 9 |
9 |
2023-07-05 20:11:52.125416 +00:00 |
RebootInstances |
eu-west-1 |
158.234.106.160 |
upcbtrga |
i-cbe23c94 |
AIDSYMQDKIEHWHN |
f3aa6d04-b85d-4b67-8d2b-100b173e428c |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDSYMQDKIEHWHN | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/upcbtrga | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | upcbtrga | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-12-08T20:11:52.125406Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDBHKAAUZPVAQC | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/uvkbzrgd | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | uvkbzrgd |
|
|
| | eventTime $.raw_event.eventTime + | 2023-07-05T20:11:52.125416Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 158.234.106.160 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-cbe23c94 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-cbe23c94 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-07-22T20:11:52.125468Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 46 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 211 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 407 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2394 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3613 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-cbe23c94 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | f3aa6d04-b85d-4b67-8d2b-100b173e428c | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 10 |
10 |
2024-03-12 20:11:52.125621 +00:00 |
RebootInstances |
eu-west-1 |
127.243.238.200 |
acmakble |
i-a6799ea9 |
AIDOCDQUGNNDAKF |
e4348eb3-6ce1-47b1-a88e-38a4cc4809ee |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDOCDQUGNNDAKF | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/acmakble | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | acmakble | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-02-13T20:11:52.125611Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDWCTFPLVASVFR | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/xagpopcg | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | xagpopcg |
|
|
| | eventTime $.raw_event.eventTime + | 2024-03-12T20:11:52.125621Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 127.243.238.200 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-a6799ea9 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-a6799ea9 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-09-07T20:11:52.125671Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 98 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 163 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 897 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3732 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2598 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-a6799ea9 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | e4348eb3-6ce1-47b1-a88e-38a4cc4809ee | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 11 |
11 |
2024-08-25 20:11:52.125803 +00:00 |
StopInstances |
us-west-2 |
163.69.177.42 |
jcddffem |
i-6b0837a3 |
AIDSZEHRVVTHPQY |
f1eb4f44-78b9-4fb4-8ace-12571be68611 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDSZEHRVVTHPQY | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/jcddffem | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | jcddffem | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-11-20T20:11:52.125791Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDCFSMFAQXPYCK | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/ommzmwgi | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | ommzmwgi |
|
|
| | eventTime $.raw_event.eventTime + | 2024-08-25T20:11:52.125803Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 163.69.177.42 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-6b0837a3 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-6b0837a3 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-09-01T20:11:52.125861Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 60 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 338 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 963 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3167 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1675 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-6b0837a3 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | f1eb4f44-78b9-4fb4-8ace-12571be68611 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 12 |
12 |
2023-08-21 20:11:52.126000 +00:00 |
StartInstances |
us-west-2 |
240.110.173.134 |
sumfbcnh |
i-5cf3c949 |
AIDTROJOKRUDFVV |
99b12529-0ddb-4deb-9fa7-970b854c29e8 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDTROJOKRUDFVV | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/sumfbcnh | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | sumfbcnh | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-12-04T20:11:52.125990Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDVQFNZPMEHFEM | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/rczcgqpb | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | rczcgqpb |
|
|
| | eventTime $.raw_event.eventTime + | 2023-08-21T20:11:52.126000Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 240.110.173.134 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-5cf3c949 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-5cf3c949 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-12-16T20:11:52.126051Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 95 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 228 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 228 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2289 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1659 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-5cf3c949 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 99b12529-0ddb-4deb-9fa7-970b854c29e8 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 13 |
13 |
2024-11-28 20:11:52.126223 +00:00 |
StopInstances |
us-west-2 |
107.219.171.141 |
qqnvrbsy |
i-892c18ed |
AIDYZQRZJFXDIGW |
63fade55-c44a-4434-b57b-a1402f4e319c |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDYZQRZJFXDIGW | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/qqnvrbsy | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | qqnvrbsy | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-10-31T20:11:52.126214Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDAWQIDHORTXHZ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/tswnkwej | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | tswnkwej |
|
|
| | eventTime $.raw_event.eventTime + | 2024-11-28T20:11:52.126223Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 107.219.171.141 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-892c18ed |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-892c18ed | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-04-28T20:11:52.126272Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 31 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 466 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 828 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4046 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1721 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-892c18ed | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 63fade55-c44a-4434-b57b-a1402f4e319c | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 14 |
14 |
2024-10-03 20:11:52.126423 +00:00 |
StartInstances |
us-west-2 |
224.242.50.237 |
fqjopscr |
i-2a1cb5b2 |
AIDBUSEOSDTPJAF |
37f98ed7-eb9c-4870-9cc0-5d833fb56e33 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDBUSEOSDTPJAF | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/fqjopscr | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | fqjopscr | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-01-17T20:11:52.126413Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDNQVNKEFCNRHO | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/foucunxo | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | foucunxo |
|
|
| | eventTime $.raw_event.eventTime + | 2024-10-03T20:11:52.126423Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 224.242.50.237 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-2a1cb5b2 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-2a1cb5b2 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-11-22T20:11:52.126485Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 33 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 140 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 913 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4450 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4424 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-2a1cb5b2 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 37f98ed7-eb9c-4870-9cc0-5d833fb56e33 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 15 |
15 |
2023-03-28 20:11:52.126615 +00:00 |
StartInstances |
us-west-2 |
231.142.104.13 |
vxyrevgk |
i-f1b0e2c4 |
AIDNYEUHJGVUEZE |
d41b644e-40cb-4af7-b9b7-8fd5197863fd |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDNYEUHJGVUEZE | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/vxyrevgk | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | vxyrevgk | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-10-06T20:11:52.126606Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDCERHBZUXVVPH | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/juqvgnmv | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | juqvgnmv |
|
|
| | eventTime $.raw_event.eventTime + | 2023-03-28T20:11:52.126615Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 231.142.104.13 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-f1b0e2c4 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-f1b0e2c4 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2025-02-07T20:11:52.126661Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 80 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 80 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 313 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4287 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1104 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-f1b0e2c4 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | d41b644e-40cb-4af7-b9b7-8fd5197863fd | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 16 |
16 |
2023-07-22 20:11:52.126790 +00:00 |
RebootInstances |
us-east-1 |
166.182.52.220 |
ctkqhash |
i-2384eee6 |
AIDYUFTTRBBSTDU |
25447925-9054-4cc0-8957-9fea95e0b9d2 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDYUFTTRBBSTDU | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/ctkqhash | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | ctkqhash | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-08-28T20:11:52.126782Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDKGUNJIMTSUDJ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/srazbnly | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | srazbnly |
|
|
| | eventTime $.raw_event.eventTime + | 2023-07-22T20:11:52.126790Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 166.182.52.220 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-2384eee6 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-2384eee6 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2025-04-08T20:11:52.126839Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 51 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 230 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 210 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3497 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3139 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-2384eee6 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 25447925-9054-4cc0-8957-9fea95e0b9d2 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 17 |
17 |
2024-05-04 20:11:52.126982 +00:00 |
StartInstances |
eu-west-1 |
235.126.11.205 |
vslveeai |
i-0312b19b |
AIDMFUEBEQZFXIY |
61d6d4d3-484e-4a9a-8243-c976a4e94dcf |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDMFUEBEQZFXIY | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/vslveeai | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | vslveeai | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-09-11T20:11:52.126974Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDRLNDDQCQPHZO | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/ijnizldn | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | ijnizldn |
|
|
| | eventTime $.raw_event.eventTime + | 2024-05-04T20:11:52.126982Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 235.126.11.205 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-0312b19b |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-0312b19b | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-11-11T20:11:52.127034Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 96 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 89 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 458 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4087 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4821 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-0312b19b | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 61d6d4d3-484e-4a9a-8243-c976a4e94dcf | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 18 |
18 |
2022-07-20 20:11:52.127203 +00:00 |
StartInstances |
us-east-1 |
32.160.238.46 |
ygzzvvjb |
i-955098db |
AIDMGIQGQAGSFEG |
b0f67437-9bac-4f06-a791-29f52e38f0d1 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDMGIQGQAGSFEG | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/ygzzvvjb | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | ygzzvvjb | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-04-01T20:11:52.127188Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDZKXXCMDQZVNR | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/nhixscmj | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | nhixscmj |
|
|
| | eventTime $.raw_event.eventTime + | 2022-07-20T20:11:52.127203Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 32.160.238.46 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-955098db |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-955098db | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-01-02T20:11:52.127285Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 14 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 270 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 765 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2868 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4381 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-955098db | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | b0f67437-9bac-4f06-a791-29f52e38f0d1 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 19 |
19 |
2023-02-13 20:11:52.127431 +00:00 |
StopInstances |
eu-west-1 |
108.250.25.95 |
vpaqwuxj |
i-a884941d |
AIDDCGMGUMKQCHR |
22078989-f3a0-43a5-a4a8-f6be48386105 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDDCGMGUMKQCHR | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/vpaqwuxj | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | vpaqwuxj | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-08-24T20:11:52.127422Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDHRGFFENLALWT | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/nuiyvhit | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | nuiyvhit |
|
|
| | eventTime $.raw_event.eventTime + | 2023-02-13T20:11:52.127431Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 108.250.25.95 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-a884941d |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-a884941d | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-07-20T20:11:52.127506Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 12 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 189 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 138 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3371 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4183 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-a884941d | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 22078989-f3a0-43a5-a4a8-f6be48386105 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 20 |
20 |
2022-09-29 20:11:52.127661 +00:00 |
StopInstances |
us-west-2 |
240.187.229.244 |
edadgtoc |
i-4c7ae788 |
AIDPKYMPRHSEJZR |
ac5ff59c-68bc-417b-baa7-dc1a8886a4cc |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDPKYMPRHSEJZR | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/edadgtoc | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | edadgtoc | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-12-20T20:11:52.127652Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDCHBUUCGQZCNN | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/iyuwxuzu | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | iyuwxuzu |
|
|
| | eventTime $.raw_event.eventTime + | 2022-09-29T20:11:52.127661Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 240.187.229.244 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-4c7ae788 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-4c7ae788 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-12-29T20:11:52.127712Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 58 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 393 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 214 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3167 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2247 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-4c7ae788 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | ac5ff59c-68bc-417b-baa7-dc1a8886a4cc | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 21 |
21 |
2024-09-21 20:11:52.127837 +00:00 |
StopInstances |
us-west-2 |
9.68.191.254 |
ftefbymp |
i-a85a23e2 |
AIDYOQCGYJIOXXP |
e5b47f97-e6c0-444e-b07a-9e85386d77c7 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDYOQCGYJIOXXP | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/ftefbymp | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | ftefbymp | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-10-08T20:11:52.127828Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDAFVMCCPDYVXF | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/nezpefqt | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | nezpefqt |
|
|
| | eventTime $.raw_event.eventTime + | 2024-09-21T20:11:52.127837Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 9.68.191.254 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-a85a23e2 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-a85a23e2 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-03-06T20:11:52.127887Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 66 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 38 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 429 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4156 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1303 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-a85a23e2 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | e5b47f97-e6c0-444e-b07a-9e85386d77c7 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 22 |
22 |
2023-04-22 20:11:52.128013 +00:00 |
StartInstances |
us-west-2 |
194.85.85.149 |
fulwqtxu |
i-3eef7aad |
AIDGSOVPMSMKQMW |
7b6800c5-4a42-4ba5-8c39-77687455a3a2 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDGSOVPMSMKQMW | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/fulwqtxu | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | fulwqtxu | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-03-12T20:11:52.128005Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDQIHEWLSHRYKI | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/oovpuluu | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | oovpuluu |
|
|
| | eventTime $.raw_event.eventTime + | 2023-04-22T20:11:52.128013Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 194.85.85.149 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-3eef7aad |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-3eef7aad | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-03-26T20:11:52.128064Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 99 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 499 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 708 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 1864 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1118 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-3eef7aad | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 7b6800c5-4a42-4ba5-8c39-77687455a3a2 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 23 |
23 |
2023-02-09 20:11:52.128191 +00:00 |
StopInstances |
us-west-2 |
251.8.182.76 |
tqvfjvxg |
i-dd28e9bb |
AIDUWPTXUTKNRDD |
cd2eef07-1a62-4a50-bba9-d7c2707f8e77 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDUWPTXUTKNRDD | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/tqvfjvxg | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | tqvfjvxg | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-05-15T20:11:52.128183Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDYVMDHBAQISYJ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/tawfwwir | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | tawfwwir |
|
|
| | eventTime $.raw_event.eventTime + | 2023-02-09T20:11:52.128191Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 251.8.182.76 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-dd28e9bb |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-dd28e9bb | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-06-24T20:11:52.128249Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 12 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 403 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 296 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3526 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1859 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-dd28e9bb | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | cd2eef07-1a62-4a50-bba9-d7c2707f8e77 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 24 |
24 |
2024-10-27 20:11:52.128394 +00:00 |
StopInstances |
us-east-1 |
59.250.185.37 |
bhuznelv |
i-58c7c2c1 |
AIDWUERGBSQNLBB |
00df10aa-54ec-4247-9a94-e889307d86e3 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDWUERGBSQNLBB | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/bhuznelv | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | bhuznelv | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-07-24T20:11:52.128386Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDMHOJQFUEVRAU | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/cahyrjge | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | cahyrjge |
|
|
| | eventTime $.raw_event.eventTime + | 2024-10-27T20:11:52.128394Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 59.250.185.37 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-58c7c2c1 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-58c7c2c1 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-07-28T20:11:52.128445Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 35 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 253 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 676 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4287 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4088 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-58c7c2c1 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 00df10aa-54ec-4247-9a94-e889307d86e3 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 25 |
25 |
2024-03-18 20:11:52.128587 +00:00 |
StopInstances |
us-west-2 |
48.13.167.220 |
mqylfeej |
i-b0232b20 |
AIDKCLTAGMQQEGK |
496d1b1c-a144-4d73-a8a3-467ba2663b31 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDKCLTAGMQQEGK | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/mqylfeej | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | mqylfeej | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-12-01T20:11:52.128577Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDZWFQPFUNWLOZ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/smewfkeq | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | smewfkeq |
|
|
| | eventTime $.raw_event.eventTime + | 2024-03-18T20:11:52.128587Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 48.13.167.220 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-b0232b20 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-b0232b20 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-11-13T20:11:52.128661Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 26 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 386 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 191 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3755 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1553 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-b0232b20 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 496d1b1c-a144-4d73-a8a3-467ba2663b31 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 26 |
26 |
2024-10-26 20:11:52.128794 +00:00 |
StopInstances |
us-west-2 |
173.154.75.248 |
ecarzova |
i-dff6027a |
AIDFAIBIWGGZAMA |
25353729-316c-45bc-b8c6-5fe27c7ac4f1 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDFAIBIWGGZAMA | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/ecarzova | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | ecarzova | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-08-26T20:11:52.128786Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDBDQDHFLDCWMS | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/qojhbvqk | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | qojhbvqk |
|
|
| | eventTime $.raw_event.eventTime + | 2024-10-26T20:11:52.128794Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 173.154.75.248 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-dff6027a |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-dff6027a | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-08-17T20:11:52.128849Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 86 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 490 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 335 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3849 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2320 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-dff6027a | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 25353729-316c-45bc-b8c6-5fe27c7ac4f1 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 27 |
27 |
2024-04-08 20:11:52.129010 +00:00 |
RebootInstances |
us-west-2 |
113.104.135.242 |
arzuxtrg |
i-eaf97836 |
AIDZXETMEGIFJRQ |
890b8049-d237-4949-8d8b-a426269686f0 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDZXETMEGIFJRQ | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/arzuxtrg | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | arzuxtrg | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-02-04T20:11:52.129001Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDZBDVGNMSWWKB | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/awymjugr | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | awymjugr |
|
|
| | eventTime $.raw_event.eventTime + | 2024-04-08T20:11:52.129010Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 113.104.135.242 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-eaf97836 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-eaf97836 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-11-26T20:11:52.129063Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 98 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 191 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 107 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3462 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4325 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-eaf97836 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 890b8049-d237-4949-8d8b-a426269686f0 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 28 |
28 |
2023-03-02 20:11:52.129193 +00:00 |
StartInstances |
eu-west-1 |
169.141.126.94 |
whiblzmq |
i-9550bd7f |
AIDXUZQTGYRAJYP |
b70b856f-439d-4f41-8eb1-03591d8dc5e2 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDXUZQTGYRAJYP | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/whiblzmq | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | whiblzmq | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-02-03T20:11:52.129185Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDAEHDVPYGQQFA | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/eaqxzkfy | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | eaqxzkfy |
|
|
| | eventTime $.raw_event.eventTime + | 2023-03-02T20:11:52.129193Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 169.141.126.94 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-9550bd7f |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-9550bd7f | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-08-29T20:11:52.129243Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 24 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 385 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 454 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2557 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4108 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-9550bd7f | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | b70b856f-439d-4f41-8eb1-03591d8dc5e2 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 29 |
29 |
2023-12-14 20:11:52.129387 +00:00 |
StopInstances |
us-west-2 |
144.111.183.242 |
revnfccd |
i-5765a2e1 |
AIDGBFVIKRDYRIG |
f180da8d-dcf6-4293-8618-3019eb507c52 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDGBFVIKRDYRIG | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/revnfccd | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | revnfccd | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-04-26T20:11:52.129378Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDYUCZTUJFEBAR | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/jhtkyiac | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | jhtkyiac |
|
|
| | eventTime $.raw_event.eventTime + | 2023-12-14T20:11:52.129387Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 144.111.183.242 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-5765a2e1 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-5765a2e1 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-02-12T20:11:52.129445Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 80 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 224 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 456 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4386 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4664 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-5765a2e1 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | f180da8d-dcf6-4293-8618-3019eb507c52 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 30 |
30 |
2022-10-07 20:11:52.129617 +00:00 |
RebootInstances |
us-east-1 |
135.225.27.129 |
pgwkaids |
i-0d7a8542 |
AIDWLZFXVAXANLI |
49804e7e-b5e9-4b30-96b6-ba47f6dcc96e |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDWLZFXVAXANLI | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/pgwkaids | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | pgwkaids | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-02-19T20:11:52.129604Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDSSHIZBFRALDZ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/ztntslvb | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | ztntslvb |
|
|
| | eventTime $.raw_event.eventTime + | 2022-10-07T20:11:52.129617Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 135.225.27.129 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-0d7a8542 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-0d7a8542 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-08-01T20:11:52.129772Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 82 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 450 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 384 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 1768 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1597 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-0d7a8542 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 49804e7e-b5e9-4b30-96b6-ba47f6dcc96e | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 31 |
31 |
2023-02-13 20:11:52.129967 +00:00 |
RebootInstances |
eu-west-1 |
92.246.40.101 |
jcqdszrw |
i-df8a6ff5 |
AIDAUDERSTESTJC |
4060c201-9f82-4bd3-9d3d-db7f3462c264 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDAUDERSTESTJC | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/jcqdszrw | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | jcqdszrw | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-07-21T20:11:52.129956Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDABAXVTDJHRLQ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/ghrenljf | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | ghrenljf |
|
|
| | eventTime $.raw_event.eventTime + | 2023-02-13T20:11:52.129967Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 92.246.40.101 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-df8a6ff5 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-df8a6ff5 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-09-24T20:11:52.130023Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 67 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 480 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 658 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4269 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2640 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-df8a6ff5 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 4060c201-9f82-4bd3-9d3d-db7f3462c264 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 32 |
32 |
2024-05-24 20:11:52.130166 +00:00 |
StopInstances |
us-west-2 |
93.235.111.189 |
ekusfymc |
i-41b50d5d |
AIDHGWSRKKSDGRC |
c8be6934-a1a9-435d-bd68-d4184193e61b |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDHGWSRKKSDGRC | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/ekusfymc | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | ekusfymc | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-08-22T20:11:52.130156Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDZDYVGGLJRAYZ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/lvoawnum | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | lvoawnum |
|
|
| | eventTime $.raw_event.eventTime + | 2024-05-24T20:11:52.130166Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 93.235.111.189 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-41b50d5d |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-41b50d5d | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-02-29T20:11:52.130217Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 54 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 387 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 861 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4319 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1256 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-41b50d5d | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | c8be6934-a1a9-435d-bd68-d4184193e61b | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 33 |
33 |
2023-07-16 20:11:52.130361 +00:00 |
StopInstances |
us-east-1 |
196.127.105.135 |
qwszsqxm |
i-dbb74242 |
AIDSXKSJIMOFWZU |
58c69a92-d2af-454c-92b5-d72120b5889c |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDSXKSJIMOFWZU | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/qwszsqxm | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | qwszsqxm | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-03-29T20:11:52.130353Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDXRMPCBOSNNCE | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/tympwsvi | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | tympwsvi |
|
|
| | eventTime $.raw_event.eventTime + | 2023-07-16T20:11:52.130361Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 196.127.105.135 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-dbb74242 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-dbb74242 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-02-11T20:11:52.130436Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 18 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 122 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 998 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4178 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4794 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-dbb74242 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 58c69a92-d2af-454c-92b5-d72120b5889c | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 34 |
34 |
2024-02-25 20:11:52.130591 +00:00 |
StartInstances |
us-west-2 |
17.96.248.169 |
unecherg |
i-5871d55f |
AIDGGUBTBIPILLY |
fb95cfd7-b506-4a84-a5cf-22a43169e706 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDGGUBTBIPILLY | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/unecherg | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | unecherg | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-11-08T20:11:52.130582Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDFJCSKYICXERV | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/ghywuglv | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | ghywuglv |
|
|
| | eventTime $.raw_event.eventTime + | 2024-02-25T20:11:52.130591Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 17.96.248.169 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-5871d55f |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-5871d55f | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-07-25T20:11:52.130642Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 59 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 459 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 445 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2527 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4488 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-5871d55f | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | fb95cfd7-b506-4a84-a5cf-22a43169e706 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 35 |
35 |
2024-04-16 20:11:52.130787 +00:00 |
StopInstances |
us-east-1 |
13.252.81.31 |
dusgathh |
i-09fd11eb |
AIDISMJLJWWYHLK |
22294659-9030-48ec-961e-02128366a6b0 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDISMJLJWWYHLK | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/dusgathh | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | dusgathh | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-09-20T20:11:52.130778Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDZCPFCKIOQPIC | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/mszltztw | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | mszltztw |
|
|
| | eventTime $.raw_event.eventTime + | 2024-04-16T20:11:52.130787Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 13.252.81.31 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-09fd11eb |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-09fd11eb | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-08-21T20:11:52.130835Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 27 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 495 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 869 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2889 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2220 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-09fd11eb | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 22294659-9030-48ec-961e-02128366a6b0 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 36 |
36 |
2023-03-09 20:11:52.130963 +00:00 |
RebootInstances |
eu-west-1 |
229.131.197.58 |
hzblpwli |
i-953fff63 |
AIDDHUKJAARKKUG |
049ae6f7-101d-4b8e-b727-e3e7b1a1ff62 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDDHUKJAARKKUG | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/hzblpwli | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | hzblpwli | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-04-30T20:11:52.130954Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDLXSHGVATUOMD | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/qvytognd | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | qvytognd |
|
|
| | eventTime $.raw_event.eventTime + | 2023-03-09T20:11:52.130963Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 229.131.197.58 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-953fff63 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-953fff63 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2025-02-01T20:11:52.131013Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 55 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 134 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 698 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4669 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4273 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-953fff63 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 049ae6f7-101d-4b8e-b727-e3e7b1a1ff62 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 37 |
37 |
2023-02-05 20:11:52.131142 +00:00 |
RebootInstances |
us-west-2 |
39.76.136.22 |
gxptcofh |
i-8c22f287 |
AIDEOJBIXYGSNAU |
f4d3d831-01bc-43ec-960d-d5ee90535f97 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDEOJBIXYGSNAU | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/gxptcofh | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | gxptcofh | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2025-03-06T20:11:52.131134Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDBYPFEDZKMTDY | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/hprrrxap | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | hprrrxap |
|
|
| | eventTime $.raw_event.eventTime + | 2023-02-05T20:11:52.131142Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 39.76.136.22 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-8c22f287 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-8c22f287 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-08-11T20:11:52.131189Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 7 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 177 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 164 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2748 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4773 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-8c22f287 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | f4d3d831-01bc-43ec-960d-d5ee90535f97 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 38 |
38 |
2025-02-17 20:11:52.131314 +00:00 |
StopInstances |
us-west-2 |
73.13.226.184 |
sihkokks |
i-1d4f18dc |
AIDETYERKAARZTX |
1bfb8e0d-44f1-4008-9c11-5e794cfb9232 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDETYERKAARZTX | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/sihkokks | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | sihkokks | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-11-26T20:11:52.131306Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDKOMZYTDDWVHY | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/adviheuu | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | adviheuu |
|
|
| | eventTime $.raw_event.eventTime + | 2025-02-17T20:11:52.131314Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 73.13.226.184 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-1d4f18dc |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-1d4f18dc | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2025-01-09T20:11:52.131360Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 64 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 98 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 685 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4594 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4716 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-1d4f18dc | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 1bfb8e0d-44f1-4008-9c11-5e794cfb9232 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 39 |
39 |
2024-09-04 20:11:52.131510 +00:00 |
RebootInstances |
us-east-1 |
120.242.21.119 |
rwutcjbi |
i-afca017e |
AIDSYXFWLOZHHRH |
0a289bf1-7a6c-4d45-a0b9-3de2cd39f32a |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDSYXFWLOZHHRH | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/rwutcjbi | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | rwutcjbi | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-02-26T20:11:52.131501Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDVJTZRRXQSOKY | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/ychqpwxm | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | ychqpwxm |
|
|
| | eventTime $.raw_event.eventTime + | 2024-09-04T20:11:52.131510Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 120.242.21.119 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-afca017e |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-afca017e | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-09-22T20:11:52.131565Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 23 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 198 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 262 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 1739 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1994 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-afca017e | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 0a289bf1-7a6c-4d45-a0b9-3de2cd39f32a | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 40 |
40 |
2024-04-17 20:11:52.131695 +00:00 |
StopInstances |
eu-west-1 |
245.61.161.142 |
puwnbdbr |
i-e639e7c8 |
AIDGOKMOXIDPQVG |
e6dea8bf-271d-49f9-b422-3a38d93a4ff1 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDGOKMOXIDPQVG | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/puwnbdbr | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | puwnbdbr | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-09-27T20:11:52.131686Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDQFBCTTROVHZG | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/eibuteom | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | eibuteom |
|
|
| | eventTime $.raw_event.eventTime + | 2024-04-17T20:11:52.131695Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 245.61.161.142 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-e639e7c8 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-e639e7c8 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-11-20T20:11:52.131742Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 81 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 240 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 748 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3441 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1203 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-e639e7c8 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | e6dea8bf-271d-49f9-b422-3a38d93a4ff1 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 41 |
41 |
2024-09-14 20:11:52.131876 +00:00 |
StopInstances |
eu-west-1 |
22.160.6.60 |
rkuzkdmv |
i-106ad8a2 |
AIDDDVVEIOTBMMI |
8b040f76-b391-490f-b9d2-aa80fe63e384 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDDDVVEIOTBMMI | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/rkuzkdmv | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | rkuzkdmv | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-10-29T20:11:52.131868Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDPORTNHUSVFPZ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/ygrjvnjn | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | ygrjvnjn |
|
|
| | eventTime $.raw_event.eventTime + | 2024-09-14T20:11:52.131876Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 22.160.6.60 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-106ad8a2 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-106ad8a2 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2025-04-09T20:11:52.131923Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 20 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 301 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 913 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4157 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3991 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-106ad8a2 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 8b040f76-b391-490f-b9d2-aa80fe63e384 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 42 |
42 |
2022-07-20 20:11:52.132049 +00:00 |
StopInstances |
us-east-1 |
208.110.154.137 |
ftqwtqkn |
i-f1f78fd6 |
AIDHVHVMMDKUYZO |
a191680f-54bb-4d92-8c2f-6560afc8771a |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDHVHVMMDKUYZO | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/ftqwtqkn | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | ftqwtqkn | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-12-31T20:11:52.132041Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDRNHPWPZEIRBU | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/btbnlugl | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | btbnlugl |
|
|
| | eventTime $.raw_event.eventTime + | 2022-07-20T20:11:52.132049Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 208.110.154.137 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-f1f78fd6 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-f1f78fd6 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-10-30T20:11:52.132096Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 12 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 295 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 815 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4843 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4217 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-f1f78fd6 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | a191680f-54bb-4d92-8c2f-6560afc8771a | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 43 |
43 |
2024-01-09 20:11:52.132224 +00:00 |
StartInstances |
eu-west-1 |
116.131.59.57 |
ckcbtasl |
i-0143cb49 |
AIDTOWASDVBLSDP |
d42d5224-4d09-40cd-a14d-d8510532986e |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDTOWASDVBLSDP | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/ckcbtasl | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | ckcbtasl | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-01-21T20:11:52.132215Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDJYGDYNEEEOLC | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/nznmqrdv | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | nznmqrdv |
|
|
| | eventTime $.raw_event.eventTime + | 2024-01-09T20:11:52.132224Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 116.131.59.57 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-0143cb49 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-0143cb49 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-11-11T20:11:52.132277Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 48 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 214 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 322 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3760 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2895 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-0143cb49 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | d42d5224-4d09-40cd-a14d-d8510532986e | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 44 |
44 |
2024-11-21 20:11:52.132404 +00:00 |
StopInstances |
eu-west-1 |
226.254.37.240 |
tvsxqefa |
i-c9d4ed48 |
AIDFHXUAWZXASRL |
9d4800c1-5f14-448f-a2d5-cfe3b7e98ca4 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDFHXUAWZXASRL | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/tvsxqefa | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | tvsxqefa | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-11-25T20:11:52.132396Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDFVQXTYMVYXPP | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/zwcciirl | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | zwcciirl |
|
|
| | eventTime $.raw_event.eventTime + | 2024-11-21T20:11:52.132404Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 226.254.37.240 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-c9d4ed48 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-c9d4ed48 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-07-07T20:11:52.132451Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 10 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 183 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 784 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4724 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1605 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-c9d4ed48 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 9d4800c1-5f14-448f-a2d5-cfe3b7e98ca4 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 45 |
45 |
2023-01-31 20:11:52.132605 +00:00 |
StopInstances |
us-west-2 |
144.139.112.183 |
ubjpkyny |
i-6a40fc88 |
AIDMGBDJWEKJLPS |
b5615b97-5847-40d8-a326-8daea430d672 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDMGBDJWEKJLPS | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/ubjpkyny | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | ubjpkyny | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2025-03-31T20:11:52.132596Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDIMFHBLXZGKIU | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/bktmnjyq | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | bktmnjyq |
|
|
| | eventTime $.raw_event.eventTime + | 2023-01-31T20:11:52.132605Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 144.139.112.183 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-6a40fc88 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-6a40fc88 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-05-28T20:11:52.132654Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 85 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 196 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 145 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4020 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4539 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-6a40fc88 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | b5615b97-5847-40d8-a326-8daea430d672 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 46 |
46 |
2024-07-31 20:11:52.132780 +00:00 |
RebootInstances |
us-west-2 |
223.104.23.243 |
eoutjton |
i-526c5920 |
AIDLZDFQILUUQMR |
05f4dcb9-3aa5-4ed1-9408-bad8ec493af2 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDLZDFQILUUQMR | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/eoutjton | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | eoutjton | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-07-31T20:11:52.132772Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDFGPCCZSJCKII | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/beugggui | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | beugggui |
|
|
| | eventTime $.raw_event.eventTime + | 2024-07-31T20:11:52.132780Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 223.104.23.243 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-526c5920 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-526c5920 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2025-01-27T20:11:52.132826Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 38 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 433 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 365 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4059 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2818 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-526c5920 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 05f4dcb9-3aa5-4ed1-9408-bad8ec493af2 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 47 |
47 |
2024-04-13 20:11:52.132969 +00:00 |
StartInstances |
us-west-2 |
16.108.65.118 |
qeeftidt |
i-36d57df5 |
AIDAYKGOJWFOGUL |
ea5f1572-f890-4842-82b2-7fa5cea4f3fb |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDAYKGOJWFOGUL | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/qeeftidt | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | qeeftidt | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-01-09T20:11:52.132960Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDDWJDXZOYFLXZ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/xxekcrea | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | xxekcrea |
|
|
| | eventTime $.raw_event.eventTime + | 2024-04-13T20:11:52.132969Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 16.108.65.118 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-36d57df5 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-36d57df5 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-01-09T20:11:52.133018Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 33 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 52 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 752 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 1187 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3799 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-36d57df5 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | ea5f1572-f890-4842-82b2-7fa5cea4f3fb | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 48 |
48 |
2024-08-21 20:11:52.133145 +00:00 |
StartInstances |
us-west-2 |
214.166.109.129 |
zxmmmiie |
i-bdc8a4e5 |
AIDLMVVCAXQAQTE |
086d60b0-2cb3-4690-ac1b-6163c5892c1c |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDLMVVCAXQAQTE | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/zxmmmiie | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | zxmmmiie | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-08-23T20:11:52.133137Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDXPEGLUBIBTRG | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/ivltxnpt | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | ivltxnpt |
|
|
| | eventTime $.raw_event.eventTime + | 2024-08-21T20:11:52.133145Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 214.166.109.129 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-bdc8a4e5 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-bdc8a4e5 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-08-22T20:11:52.133194Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 84 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 261 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 227 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4657 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2740 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-bdc8a4e5 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 086d60b0-2cb3-4690-ac1b-6163c5892c1c | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 49 |
49 |
2024-05-04 20:11:52.133368 +00:00 |
StopInstances |
us-east-1 |
159.144.83.97 |
bwrdrnue |
i-520879c2 |
AIDUQGMBPGUZGRY |
0660cfac-ad27-4ad9-ac9c-db7afce7b779 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDUQGMBPGUZGRY | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/bwrdrnue | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | bwrdrnue | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-04-20T20:11:52.133357Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDOFTPYRMELVIS | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/oqpchmgf | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | oqpchmgf |
|
|
| | eventTime $.raw_event.eventTime + | 2024-05-04T20:11:52.133368Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 159.144.83.97 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-520879c2 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-520879c2 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-03-10T20:11:52.133427Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 81 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 262 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 612 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3966 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3630 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-520879c2 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 0660cfac-ad27-4ad9-ac9c-db7afce7b779 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 50 |
50 |
2022-12-10 20:11:52.133658 +00:00 |
StartInstances |
eu-west-1 |
200.72.41.55 |
gwdoowwb |
i-fc802fae |
AIDBRSQMIMXKKFO |
ffc63f28-846c-49c9-8589-5cbb027893b2 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDBRSQMIMXKKFO | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/gwdoowwb | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | gwdoowwb | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-11-15T20:11:52.133642Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDAUGKWGWSWQCT | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/fixepwaw | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | fixepwaw |
|
|
| | eventTime $.raw_event.eventTime + | 2022-12-10T20:11:52.133658Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 200.72.41.55 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-fc802fae |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-fc802fae | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-03-18T20:11:52.133717Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 99 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 310 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 784 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2862 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1526 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-fc802fae | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | ffc63f28-846c-49c9-8589-5cbb027893b2 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 51 |
51 |
2022-10-22 20:11:52.133860 +00:00 |
StopInstances |
us-east-1 |
41.248.32.72 |
sizmbaau |
i-468c7504 |
AIDCOEQOXPXWQNC |
e8459789-0105-454a-b3da-4a654f21880a |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDCOEQOXPXWQNC | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/sizmbaau | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | sizmbaau | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-04-26T20:11:52.133851Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDFNOQZBHIBARS | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/xxzzptnq | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | xxzzptnq |
|
|
| | eventTime $.raw_event.eventTime + | 2022-10-22T20:11:52.133860Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 41.248.32.72 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-468c7504 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-468c7504 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-04-01T20:11:52.133909Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 56 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 500 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 618 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3240 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3267 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-468c7504 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | e8459789-0105-454a-b3da-4a654f21880a | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 52 |
52 |
2024-06-06 20:11:52.134035 +00:00 |
StartInstances |
us-east-1 |
84.170.106.193 |
nqmhbjus |
i-fdd7c800 |
AIDOGNZLJVQDWAK |
4701a7b1-d5cc-4a0a-81cc-80b91a78cf94 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDOGNZLJVQDWAK | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/nqmhbjus | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | nqmhbjus | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-12-27T20:11:52.134027Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDGMARXXRUIDOB | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/etvudjug | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | etvudjug |
|
|
| | eventTime $.raw_event.eventTime + | 2024-06-06T20:11:52.134035Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 84.170.106.193 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-fdd7c800 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-fdd7c800 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-07-24T20:11:52.134082Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 85 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 168 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 889 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3586 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1276 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-fdd7c800 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 4701a7b1-d5cc-4a0a-81cc-80b91a78cf94 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 53 |
53 |
2024-08-06 20:11:52.134206 +00:00 |
StartInstances |
us-east-1 |
180.87.2.132 |
ffysbnsv |
i-c9bd9ad3 |
AIDDQZKLIGSGJHP |
44d694e1-60ec-462f-ad57-e76df52ee58d |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDDQZKLIGSGJHP | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/ffysbnsv | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | ffysbnsv | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-05-14T20:11:52.134198Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDTIZCQGUBCLKS | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/hxcuitgm | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | hxcuitgm |
|
|
| | eventTime $.raw_event.eventTime + | 2024-08-06T20:11:52.134206Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 180.87.2.132 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-c9bd9ad3 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-c9bd9ad3 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-01-14T20:11:52.134253Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 58 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 275 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 725 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4597 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1853 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-c9bd9ad3 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 44d694e1-60ec-462f-ad57-e76df52ee58d | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 54 |
54 |
2023-11-20 20:11:52.134395 +00:00 |
StopInstances |
us-east-1 |
66.61.143.50 |
eaarakay |
i-3fc714ee |
AIDKDIVHFKCCFXG |
32bbeb97-335e-4865-8bba-c5dc282a6db6 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDKDIVHFKCCFXG | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/eaarakay | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | eaarakay | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-07-16T20:11:52.134386Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDYQDQHTTAKLMD | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/dzphluro | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | dzphluro |
|
|
| | eventTime $.raw_event.eventTime + | 2023-11-20T20:11:52.134395Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 66.61.143.50 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-3fc714ee |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-3fc714ee | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-03-16T20:11:52.134450Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 65 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 27 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 725 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4785 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1305 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-3fc714ee | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 32bbeb97-335e-4865-8bba-c5dc282a6db6 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 55 |
55 |
2023-08-07 20:11:52.134575 +00:00 |
StopInstances |
us-west-2 |
171.133.213.23 |
qamydahf |
i-fea700a6 |
AIDOAHNOEQKEZWT |
9dddaafd-a975-4c1b-806b-558f611f0e66 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDOAHNOEQKEZWT | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/qamydahf | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | qamydahf | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-02-12T20:11:52.134566Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDABTQVHAZELIB | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/pasphssu | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | pasphssu |
|
|
| | eventTime $.raw_event.eventTime + | 2023-08-07T20:11:52.134575Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 171.133.213.23 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-fea700a6 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-fea700a6 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-01-10T20:11:52.134623Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 76 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 399 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 851 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2063 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4143 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-fea700a6 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 9dddaafd-a975-4c1b-806b-558f611f0e66 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 56 |
56 |
2024-01-20 20:11:52.134774 +00:00 |
RebootInstances |
us-west-2 |
230.104.102.158 |
kizskahm |
i-4f285b78 |
AIDAMYXTPKDXLZE |
8a7d9541-70fa-4972-a47f-5d1351ae1ade |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDAMYXTPKDXLZE | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/kizskahm | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | kizskahm | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-06-20T20:11:52.134765Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDWPVYVKJQYDWE | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/bocwchwm | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | bocwchwm |
|
|
| | eventTime $.raw_event.eventTime + | 2024-01-20T20:11:52.134774Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 230.104.102.158 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-4f285b78 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-4f285b78 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-11-01T20:11:52.134824Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 50 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 455 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 617 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3513 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4854 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-4f285b78 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 8a7d9541-70fa-4972-a47f-5d1351ae1ade | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 57 |
57 |
2024-03-12 20:11:52.134948 +00:00 |
StopInstances |
us-east-1 |
223.12.54.120 |
kxpfbmal |
i-48198948 |
AIDXRWYERTEZPQA |
ebe11ef8-91d6-4848-a6f4-dfc27aece29c |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDXRWYERTEZPQA | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/kxpfbmal | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | kxpfbmal | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-10-31T20:11:52.134939Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDHVZVYCVJUWDR | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/teujqdcb | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | teujqdcb |
|
|
| | eventTime $.raw_event.eventTime + | 2024-03-12T20:11:52.134948Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 223.12.54.120 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-48198948 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-48198948 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-02-13T20:11:52.134995Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 1 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 221 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 213 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2151 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3282 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-48198948 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | ebe11ef8-91d6-4848-a6f4-dfc27aece29c | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 58 |
58 |
2025-02-02 20:11:52.135118 +00:00 |
StopInstances |
us-east-1 |
46.6.203.74 |
tzjubrnq |
i-72c962f3 |
AIDHDXUFYMWXRFU |
c037f990-57ed-4193-9c7e-0fcc5564a4ab |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDHDXUFYMWXRFU | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/tzjubrnq | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | tzjubrnq | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-08-07T20:11:52.135110Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDKLMRAFTEZQKQ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/waysbqwn | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | waysbqwn |
|
|
| | eventTime $.raw_event.eventTime + | 2025-02-02T20:11:52.135118Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 46.6.203.74 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-72c962f3 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-72c962f3 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-08-16T20:11:52.135166Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 49 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 375 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 994 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4211 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2235 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-72c962f3 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | c037f990-57ed-4193-9c7e-0fcc5564a4ab | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 59 |
59 |
2024-06-07 20:11:52.135290 +00:00 |
StopInstances |
us-east-1 |
19.255.34.165 |
qcxomehq |
i-116124b7 |
AIDWJXAHSIHDLTB |
95897bde-30ee-4021-99f1-9928f649c583 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDWJXAHSIHDLTB | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/qcxomehq | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | qcxomehq | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-05-09T20:11:52.135281Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDLMPZBSLISFET | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/gdljcwyz | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | gdljcwyz |
|
|
| | eventTime $.raw_event.eventTime + | 2024-06-07T20:11:52.135290Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 19.255.34.165 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-116124b7 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-116124b7 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-06-07T20:11:52.135338Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 17 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 178 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 238 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4309 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3874 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-116124b7 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 95897bde-30ee-4021-99f1-9928f649c583 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 60 |
60 |
2024-04-28 20:11:52.135465 +00:00 |
StopInstances |
us-east-1 |
206.97.160.79 |
qqlxacsu |
i-ffef9718 |
AIDGHYBXRBCGCVI |
66dc8280-2d58-4713-99a4-c49289584f7f |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDGHYBXRBCGCVI | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/qqlxacsu | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | qqlxacsu | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-09-18T20:11:52.135457Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDKLNXRGQDLZDD | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/ndaqcqco | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | ndaqcqco |
|
|
| | eventTime $.raw_event.eventTime + | 2024-04-28T20:11:52.135465Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 206.97.160.79 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-ffef9718 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-ffef9718 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-10-26T20:11:52.135519Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 100 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 472 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 588 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 1609 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3846 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-ffef9718 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 66dc8280-2d58-4713-99a4-c49289584f7f | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 61 |
61 |
2023-05-04 20:11:52.135697 +00:00 |
StopInstances |
us-west-2 |
77.76.66.93 |
jlbulhql |
i-67b3efe8 |
AIDPLFBFJFICSLA |
61b026a5-58d2-4cf8-991d-7b8b74843b9f |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDPLFBFJFICSLA | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/jlbulhql | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | jlbulhql | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-03-15T20:11:52.135686Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDWOICLVHYDZKG | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/oncszhoh | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | oncszhoh |
|
|
| | eventTime $.raw_event.eventTime + | 2023-05-04T20:11:52.135697Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 77.76.66.93 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-67b3efe8 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-67b3efe8 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-04-28T20:11:52.135758Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 74 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 432 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 372 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3973 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4906 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-67b3efe8 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 61b026a5-58d2-4cf8-991d-7b8b74843b9f | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 62 |
62 |
2025-03-21 20:11:52.135906 +00:00 |
RebootInstances |
us-east-1 |
122.40.218.73 |
xssputee |
i-4625dec4 |
AIDMPJWKAGOOEXL |
d5ec66f9-bd14-4ee7-bcbf-575def881247 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDMPJWKAGOOEXL | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/xssputee | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | xssputee | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-06-13T20:11:52.135897Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDGVRPSVCRIDLY | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/puqjqdti | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | puqjqdti |
|
|
| | eventTime $.raw_event.eventTime + | 2025-03-21T20:11:52.135906Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 122.40.218.73 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-4625dec4 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-4625dec4 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-04-28T20:11:52.135957Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 72 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 380 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 328 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 1504 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2446 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-4625dec4 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | d5ec66f9-bd14-4ee7-bcbf-575def881247 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 63 |
63 |
2025-02-24 20:11:52.136118 +00:00 |
RebootInstances |
us-west-2 |
77.209.28.2 |
tslmcqwh |
i-142cbbda |
AIDCPXNQBMGJRTB |
035cb0e2-3676-4e20-8a7b-83f67f3815e4 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDCPXNQBMGJRTB | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/tslmcqwh | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | tslmcqwh | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-06-23T20:11:52.136109Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDVVLSBDDNKLKI | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/pxzfaoce | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | pxzfaoce |
|
|
| | eventTime $.raw_event.eventTime + | 2025-02-24T20:11:52.136118Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 77.209.28.2 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-142cbbda |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-142cbbda | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-08-21T20:11:52.136178Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 23 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 394 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 245 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3104 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3108 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-142cbbda | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 035cb0e2-3676-4e20-8a7b-83f67f3815e4 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 64 |
64 |
2024-09-02 20:11:52.136372 +00:00 |
StopInstances |
us-east-1 |
113.12.82.233 |
ywvlrjsj |
i-8750a66d |
AIDPIXJXYOJQPKX |
24f0b2fa-88c9-4cfa-8482-67467e62c60b |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDPIXJXYOJQPKX | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/ywvlrjsj | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | ywvlrjsj | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-08-19T20:11:52.136359Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDIEQZDPEYAQAN | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/kqwfdvwv | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | kqwfdvwv |
|
|
| | eventTime $.raw_event.eventTime + | 2024-09-02T20:11:52.136372Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 113.12.82.233 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-8750a66d |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-8750a66d | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-06-16T20:11:52.136426Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 18 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 436 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 163 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 1223 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2730 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-8750a66d | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 24f0b2fa-88c9-4cfa-8482-67467e62c60b | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 65 |
65 |
2023-10-24 20:11:52.136566 +00:00 |
RebootInstances |
eu-west-1 |
242.98.186.183 |
lxsoifnk |
i-40ccd46b |
AIDZSIPBNWQUPBV |
52628c27-55a0-4bf4-b1f7-50ac982e0663 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDZSIPBNWQUPBV | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/lxsoifnk | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | lxsoifnk | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-10-10T20:11:52.136552Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDOWCFZFUPANZK | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/xdsgvtdn | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | xdsgvtdn |
|
|
| | eventTime $.raw_event.eventTime + | 2023-10-24T20:11:52.136566Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 242.98.186.183 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-40ccd46b |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-40ccd46b | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-01-12T20:11:52.136657Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 29 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 160 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 373 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2508 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3126 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-40ccd46b | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 52628c27-55a0-4bf4-b1f7-50ac982e0663 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 66 |
66 |
2025-01-24 20:11:52.136820 +00:00 |
StartInstances |
us-west-2 |
144.141.197.214 |
obtcntij |
i-bb98002d |
AIDICIKZFOLCOIE |
4e625dca-14e2-4640-bc53-3316258c2f38 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDICIKZFOLCOIE | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/obtcntij | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | obtcntij | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-06-23T20:11:52.136806Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDDMWVXNTYBAYC | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/vkavsarx | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | vkavsarx |
|
|
| | eventTime $.raw_event.eventTime + | 2025-01-24T20:11:52.136820Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 144.141.197.214 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-bb98002d |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-bb98002d | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2025-01-22T20:11:52.136984Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 39 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 339 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 245 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4753 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1028 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-bb98002d | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 4e625dca-14e2-4640-bc53-3316258c2f38 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 67 |
67 |
2024-08-07 20:11:52.137219 +00:00 |
RebootInstances |
eu-west-1 |
80.132.215.176 |
ymeonltz |
i-d24613fb |
AIDWEHHNFQCHDYH |
e9608f96-30cb-4978-bcab-fa3ee30e3f12 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDWEHHNFQCHDYH | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/ymeonltz | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | ymeonltz | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2025-01-19T20:11:52.137200Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDPNWGGWJMAEDJ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/itxigzpa | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | itxigzpa |
|
|
| | eventTime $.raw_event.eventTime + | 2024-08-07T20:11:52.137219Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 80.132.215.176 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-d24613fb |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-d24613fb | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-04-10T20:11:52.137308Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 49 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 449 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 123 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 1441 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3260 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-d24613fb | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | e9608f96-30cb-4978-bcab-fa3ee30e3f12 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 68 |
68 |
2023-03-17 20:11:52.137531 +00:00 |
StartInstances |
us-east-1 |
142.107.204.241 |
otckgyxx |
i-e0a6729e |
AIDVCIKQDBNHPRF |
afe205cd-871e-42bb-8a1b-697abce30865 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDVCIKQDBNHPRF | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/otckgyxx | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | otckgyxx | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-07-03T20:11:52.137516Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDXGKBMJGUDSUU | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/xrjqvket | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | xrjqvket |
|
|
| | eventTime $.raw_event.eventTime + | 2023-03-17T20:11:52.137531Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 142.107.204.241 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-e0a6729e |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-e0a6729e | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2025-01-31T20:11:52.137605Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 74 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 349 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 911 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2334 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3093 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-e0a6729e | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | afe205cd-871e-42bb-8a1b-697abce30865 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 69 |
69 |
2023-08-24 20:11:52.137736 +00:00 |
RebootInstances |
us-west-2 |
12.106.158.3 |
fgnreyer |
i-f4d5dddd |
AIDQYOPRORIHSFN |
905cfc49-47d1-4506-8639-0b09d074ebcd |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDQYOPRORIHSFN | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/fgnreyer | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | fgnreyer | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2025-01-09T20:11:52.137728Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDAKSIDTZRBRSO | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/oropuhej | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | oropuhej |
|
|
| | eventTime $.raw_event.eventTime + | 2023-08-24T20:11:52.137736Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 12.106.158.3 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-f4d5dddd |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-f4d5dddd | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-12-30T20:11:52.137817Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 1 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 106 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 817 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4739 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4298 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-f4d5dddd | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 905cfc49-47d1-4506-8639-0b09d074ebcd | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 70 |
70 |
2024-09-16 20:11:52.138012 +00:00 |
StartInstances |
us-east-1 |
36.194.249.101 |
fszrqcjs |
i-0d2077cd |
AIDXGBCPBYAHSIG |
b1562724-18a2-4fff-9f08-d6502a4f9bbc |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDXGBCPBYAHSIG | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/fszrqcjs | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | fszrqcjs | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-12-06T20:11:52.138001Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDXAHTDEIQPYGK | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/cqftvyrh | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | cqftvyrh |
|
|
| | eventTime $.raw_event.eventTime + | 2024-09-16T20:11:52.138012Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 36.194.249.101 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-0d2077cd |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-0d2077cd | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-08-30T20:11:52.138175Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 4 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 234 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 510 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 1828 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2437 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-0d2077cd | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | b1562724-18a2-4fff-9f08-d6502a4f9bbc | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 71 |
71 |
2024-09-11 20:11:52.138448 +00:00 |
StopInstances |
eu-west-1 |
206.65.16.85 |
poyssocm |
i-9f34b0b0 |
AIDAIDXZTLYRXMD |
2fd3ff3e-915f-4cb4-af1c-f47bc73eb2c1 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDAIDXZTLYRXMD | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/poyssocm | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | poyssocm | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-10-10T20:11:52.138436Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDRWZQDMKNETRA | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/oifgckfk | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | oifgckfk |
|
|
| | eventTime $.raw_event.eventTime + | 2024-09-11T20:11:52.138448Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 206.65.16.85 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-9f34b0b0 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-9f34b0b0 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-12-12T20:11:52.138527Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 17 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 204 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 214 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4384 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4819 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-9f34b0b0 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 2fd3ff3e-915f-4cb4-af1c-f47bc73eb2c1 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 72 |
72 |
2024-04-06 20:11:52.138776 +00:00 |
StartInstances |
eu-west-1 |
63.103.178.215 |
xmewxwww |
i-e914eb07 |
AIDCWNGISCLHDRA |
32b1d75a-9688-4992-b4cb-0f0bf03de05a |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDCWNGISCLHDRA | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/xmewxwww | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | xmewxwww | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-03-15T20:11:52.138764Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDAREVGELSSXGT | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/czomsvrw | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | czomsvrw |
|
|
| | eventTime $.raw_event.eventTime + | 2024-04-06T20:11:52.138776Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 63.103.178.215 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-e914eb07 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-e914eb07 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-09-05T20:11:52.138849Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 2 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 462 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 938 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3962 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4890 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-e914eb07 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 32b1d75a-9688-4992-b4cb-0f0bf03de05a | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 73 |
73 |
2024-01-01 20:11:52.139041 +00:00 |
RebootInstances |
us-west-2 |
69.20.222.236 |
fpilulxl |
i-b6f6afef |
AIDRABVOZUCRYOE |
1c7ece5f-ac82-468e-be0b-0b7292ecd83c |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDRABVOZUCRYOE | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/fpilulxl | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | fpilulxl | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-06-19T20:11:52.139028Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDDVFJQAFEBMWP | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/xubcbghq | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | xubcbghq |
|
|
| | eventTime $.raw_event.eventTime + | 2024-01-01T20:11:52.139041Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 69.20.222.236 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-b6f6afef |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-b6f6afef | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-02-26T20:11:52.139115Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 70 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 258 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 687 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 1277 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3932 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-b6f6afef | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 1c7ece5f-ac82-468e-be0b-0b7292ecd83c | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 74 |
74 |
2025-03-31 20:11:52.139307 +00:00 |
RebootInstances |
eu-west-1 |
200.198.90.76 |
upzbwyha |
i-0c57b9af |
AIDMEPGSBSYRAQO |
1f8581c9-8316-4268-a154-e1e1148b0710 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDMEPGSBSYRAQO | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/upzbwyha | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | upzbwyha | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-08-23T20:11:52.139298Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDJROCGIFCFCQY | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/dgxfvfte | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | dgxfvfte |
|
|
| | eventTime $.raw_event.eventTime + | 2025-03-31T20:11:52.139307Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 200.198.90.76 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-0c57b9af |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-0c57b9af | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-11-16T20:11:52.139392Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 69 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 88 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 785 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 1125 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3736 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-0c57b9af | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 1f8581c9-8316-4268-a154-e1e1148b0710 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 75 |
75 |
2024-11-17 20:11:52.139563 +00:00 |
StartInstances |
eu-west-1 |
87.40.48.67 |
glydhaiy |
i-af7e98a0 |
AIDPLGGOCBWHHEK |
30b755b5-6fbf-4cb2-baf3-9be9526e45ed |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDPLGGOCBWHHEK | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/glydhaiy | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | glydhaiy | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-08-26T20:11:52.139546Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDSQLAEQRQZSCD | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/vsvanrlu | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | vsvanrlu |
|
|
| | eventTime $.raw_event.eventTime + | 2024-11-17T20:11:52.139563Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 87.40.48.67 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-af7e98a0 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-af7e98a0 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-12-17T20:11:52.139637Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 94 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 437 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 964 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4794 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3975 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-af7e98a0 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 30b755b5-6fbf-4cb2-baf3-9be9526e45ed | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 76 |
76 |
2025-03-31 20:11:52.139926 +00:00 |
StopInstances |
eu-west-1 |
169.135.101.74 |
cfitsewb |
i-9a9c2a2f |
AIDQCCWMDITQARR |
5ffc9a74-7d9a-43e4-8c1f-afa26e98fdc7 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDQCCWMDITQARR | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/cfitsewb | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | cfitsewb | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-09-17T20:11:52.139900Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDACDAMHBNPCUR | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/sbcxgbmj | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | sbcxgbmj |
|
|
| | eventTime $.raw_event.eventTime + | 2025-03-31T20:11:52.139926Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 169.135.101.74 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-9a9c2a2f |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-9a9c2a2f | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-03-20T20:11:52.140016Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 83 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 169 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 483 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4101 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4074 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-9a9c2a2f | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 5ffc9a74-7d9a-43e4-8c1f-afa26e98fdc7 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 77 |
77 |
2024-01-20 20:11:52.140249 +00:00 |
StartInstances |
us-west-2 |
24.65.81.111 |
quhgokvr |
i-b8c6f0ce |
AIDGOTIJZVITJUS |
5507873d-8d80-448c-96e2-3ce6b8b774a4 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDGOTIJZVITJUS | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/quhgokvr | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | quhgokvr | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-01-16T20:11:52.140236Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDZASSIYLEHUCZ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/uwmfxnbz | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | uwmfxnbz |
|
|
| | eventTime $.raw_event.eventTime + | 2024-01-20T20:11:52.140249Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 24.65.81.111 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-b8c6f0ce |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-b8c6f0ce | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-08-21T20:11:52.140405Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 41 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 418 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 319 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 1535 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1374 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-b8c6f0ce | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 5507873d-8d80-448c-96e2-3ce6b8b774a4 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 78 |
78 |
2024-02-22 20:11:52.140668 +00:00 |
StartInstances |
us-east-1 |
200.37.125.123 |
qmogynyr |
i-23e69a8b |
AIDEMCLRYGDABRI |
da6d84e9-521b-43fb-aad5-3d284cae5625 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDEMCLRYGDABRI | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/qmogynyr | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | qmogynyr | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-12-11T20:11:52.140656Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDOIIOIJNQSHRO | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/txngzhsr | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | txngzhsr |
|
|
| | eventTime $.raw_event.eventTime + | 2024-02-22T20:11:52.140668Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 200.37.125.123 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-23e69a8b |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-23e69a8b | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-03-04T20:11:52.140735Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 38 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 191 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 739 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4019 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3577 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-23e69a8b | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | da6d84e9-521b-43fb-aad5-3d284cae5625 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 79 |
79 |
2022-07-27 20:11:52.140984 +00:00 |
RebootInstances |
us-east-1 |
16.115.107.229 |
lxhipybx |
i-0a95b13e |
AIDWBYEVWBHWNTY |
983b782a-43fc-4915-aa30-b79589cdb8c2 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDWBYEVWBHWNTY | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/lxhipybx | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | lxhipybx | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-11-05T20:11:52.140970Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDEFTYRUPFUTQY | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/uaykxgji | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | uaykxgji |
|
|
| | eventTime $.raw_event.eventTime + | 2022-07-27T20:11:52.140984Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 16.115.107.229 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-0a95b13e |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-0a95b13e | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-11-03T20:11:52.141053Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 11 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 52 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 997 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2527 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3773 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-0a95b13e | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 983b782a-43fc-4915-aa30-b79589cdb8c2 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 80 |
80 |
2024-10-27 20:11:52.141259 +00:00 |
RebootInstances |
us-west-2 |
177.127.146.11 |
axzkgajb |
i-192aff4f |
AIDPJBFTLFAMOCC |
c325d0f5-9431-4ac6-aff8-7611942a0ece |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDPJBFTLFAMOCC | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/axzkgajb | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | axzkgajb | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-01-03T20:11:52.141249Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDQWFZEWVSIJXI | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/hfdjavzu | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | hfdjavzu |
|
|
| | eventTime $.raw_event.eventTime + | 2024-10-27T20:11:52.141259Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 177.127.146.11 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-192aff4f |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-192aff4f | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-09-12T20:11:52.141344Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 17 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 277 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 1000 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4367 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4602 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-192aff4f | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | c325d0f5-9431-4ac6-aff8-7611942a0ece | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 81 |
81 |
2024-11-24 20:11:52.141532 +00:00 |
StartInstances |
us-east-1 |
194.165.60.78 |
qkhjtaqo |
i-a8f497d2 |
AIDIDVWBZWHQGNW |
ad79d14c-a16b-446e-926c-85f9696d9372 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDIDVWBZWHQGNW | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/qkhjtaqo | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | qkhjtaqo | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2025-04-11T20:11:52.141522Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDFFFTZYYXLEVJ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/sehzwcpk | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | sehzwcpk |
|
|
| | eventTime $.raw_event.eventTime + | 2024-11-24T20:11:52.141532Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 194.165.60.78 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-a8f497d2 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-a8f497d2 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-05-31T20:11:52.141589Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 49 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 403 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 433 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4312 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3690 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-a8f497d2 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | ad79d14c-a16b-446e-926c-85f9696d9372 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 82 |
82 |
2023-10-08 20:11:52.141759 +00:00 |
StopInstances |
us-east-1 |
175.65.49.70 |
iigpixbn |
i-5bd906b1 |
AIDRQJNYYTBWLAU |
aa16732e-28a3-42b8-b205-eab63aa2e530 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDRQJNYYTBWLAU | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/iigpixbn | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | iigpixbn | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-05-17T20:11:52.141749Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDVFQESGVEISNM | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/htccmxzg | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | htccmxzg |
|
|
| | eventTime $.raw_event.eventTime + | 2023-10-08T20:11:52.141759Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 175.65.49.70 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-5bd906b1 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-5bd906b1 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-11-14T20:11:52.141812Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 49 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 384 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 909 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2615 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4642 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-5bd906b1 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | aa16732e-28a3-42b8-b205-eab63aa2e530 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 83 |
83 |
2024-05-25 20:11:52.142018 +00:00 |
StartInstances |
eu-west-1 |
48.212.170.37 |
luoovxla |
i-33d6e95e |
AIDTJBATFAVNOOR |
3ed82621-3ed0-4e37-958f-1f4ec0319bb4 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDTJBATFAVNOOR | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/luoovxla | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | luoovxla | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-08-06T20:11:52.142004Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDEOAKUOYMQECT | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/tdfqeqlk | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | tdfqeqlk |
|
|
| | eventTime $.raw_event.eventTime + | 2024-05-25T20:11:52.142018Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 48.212.170.37 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-33d6e95e |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-33d6e95e | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-08-16T20:11:52.142084Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 89 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 436 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 276 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3892 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1785 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-33d6e95e | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 3ed82621-3ed0-4e37-958f-1f4ec0319bb4 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 84 |
84 |
2024-05-20 20:11:52.142287 +00:00 |
StartInstances |
us-west-2 |
7.86.209.65 |
vmxkqjcr |
i-5ba6a3de |
AIDEAMOBUBAYWNE |
9406637b-fcfe-41cc-953b-b8a4dc2b154d |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDEAMOBUBAYWNE | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/vmxkqjcr | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | vmxkqjcr | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-11-06T20:11:52.142277Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDNPRHCZVTMOCZ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/sukpprry | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | sukpprry |
|
|
| | eventTime $.raw_event.eventTime + | 2024-05-20T20:11:52.142287Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 7.86.209.65 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-5ba6a3de |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-5ba6a3de | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-06-19T20:11:52.142349Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 83 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 126 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 893 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2500 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3187 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-5ba6a3de | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 9406637b-fcfe-41cc-953b-b8a4dc2b154d | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 85 |
85 |
2022-09-24 20:11:52.142512 +00:00 |
StopInstances |
us-east-1 |
96.232.22.229 |
pczahnod |
i-90cc311b |
AIDQPDXMLGSLUHS |
127dbc84-5d4c-4b9f-899f-75301db66925 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDQPDXMLGSLUHS | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/pczahnod | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | pczahnod | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-08-07T20:11:52.142502Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDXJXFKBLBZKDA | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/drwdbxqr | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | drwdbxqr |
|
|
| | eventTime $.raw_event.eventTime + | 2022-09-24T20:11:52.142512Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 96.232.22.229 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-90cc311b |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-90cc311b | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-09-08T20:11:52.142571Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 96 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 467 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 116 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3913 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3027 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-90cc311b | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 127dbc84-5d4c-4b9f-899f-75301db66925 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 86 |
86 |
2024-08-04 20:11:52.142713 +00:00 |
StartInstances |
us-west-2 |
249.66.174.26 |
cjqthakp |
i-9ac49957 |
AIDFHPYEGIPFWZN |
c4c67aeb-288b-4c70-896c-2e2e7f83a160 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDFHPYEGIPFWZN | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/cjqthakp | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | cjqthakp | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-08-16T20:11:52.142701Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDIZDTKLQLWHAX | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/htxdbhla | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | htxdbhla |
|
|
| | eventTime $.raw_event.eventTime + | 2024-08-04T20:11:52.142713Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 249.66.174.26 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-9ac49957 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-9ac49957 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-10-23T20:11:52.142771Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 43 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 281 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 736 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 1884 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3804 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-9ac49957 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | c4c67aeb-288b-4c70-896c-2e2e7f83a160 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 87 |
87 |
2024-02-23 20:11:52.142914 +00:00 |
RebootInstances |
eu-west-1 |
229.250.167.60 |
sndpqvst |
i-64e02cb6 |
AIDDNEUZXPVOTII |
0d5da4ab-0527-4435-94a4-1b04cc7b225b |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDDNEUZXPVOTII | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/sndpqvst | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | sndpqvst | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-05-28T20:11:52.142900Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDTDINXZSSBVLA | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/eviefeam | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | eviefeam |
|
|
| | eventTime $.raw_event.eventTime + | 2024-02-23T20:11:52.142914Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 229.250.167.60 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-64e02cb6 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-64e02cb6 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-07-25T20:11:52.142978Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 44 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 424 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 262 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4863 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1850 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-64e02cb6 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 0d5da4ab-0527-4435-94a4-1b04cc7b225b | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 88 |
88 |
2023-04-06 20:11:52.143121 +00:00 |
RebootInstances |
us-west-2 |
44.238.13.87 |
vhhtrpsb |
i-6cd2f8c0 |
AIDGZCDIGYDPDZP |
aa807569-8f2a-42ff-892a-63bb4606004c |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDGZCDIGYDPDZP | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/vhhtrpsb | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | vhhtrpsb | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-08-11T20:11:52.143112Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDUERIHURXXHWZ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/apvmezgz | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | apvmezgz |
|
|
| | eventTime $.raw_event.eventTime + | 2023-04-06T20:11:52.143121Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 44.238.13.87 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-6cd2f8c0 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-6cd2f8c0 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2025-02-11T20:11:52.143192Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 31 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 62 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 828 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3789 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1961 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-6cd2f8c0 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | aa807569-8f2a-42ff-892a-63bb4606004c | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 89 |
89 |
2022-10-29 20:11:52.143356 +00:00 |
RebootInstances |
us-east-1 |
229.196.172.32 |
nsbohmbh |
i-f5be0f30 |
AIDYNLCNKDYAZQA |
9d93b3c1-1c3d-4688-8c08-4fd51a4e270e |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDYNLCNKDYAZQA | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/nsbohmbh | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | nsbohmbh | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-04-02T20:11:52.143343Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDNBUFDVOBUYLX | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/ctvkpfes | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | ctvkpfes |
|
|
| | eventTime $.raw_event.eventTime + | 2022-10-29T20:11:52.143356Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 229.196.172.32 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-f5be0f30 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-f5be0f30 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-12-19T20:11:52.143416Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 54 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 367 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 675 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2233 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4305 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-f5be0f30 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 9d93b3c1-1c3d-4688-8c08-4fd51a4e270e | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 90 |
90 |
2024-02-11 20:11:52.143577 +00:00 |
RebootInstances |
us-east-1 |
30.43.221.88 |
vlzwxglv |
i-3e6bda91 |
AIDLYOBSPAUPMYE |
14450665-5c0b-4d1e-aec5-78d9db6507cf |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDLYOBSPAUPMYE | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/vlzwxglv | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | vlzwxglv | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-04-27T20:11:52.143567Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDOCFJTQXUKTPC | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/ljbqcupn | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | ljbqcupn |
|
|
| | eventTime $.raw_event.eventTime + | 2024-02-11T20:11:52.143577Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 30.43.221.88 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-3e6bda91 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-3e6bda91 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-10-08T20:11:52.143642Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 51 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 493 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 694 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2993 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1943 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-3e6bda91 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 14450665-5c0b-4d1e-aec5-78d9db6507cf | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 91 |
91 |
2024-07-31 20:11:52.143800 +00:00 |
RebootInstances |
eu-west-1 |
236.7.239.43 |
ouwttsgq |
i-4cbe6a36 |
AIDWOZZZGNAGJYO |
a620bc54-ce76-4f74-a777-0bd1a074e2dc |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDWOZZZGNAGJYO | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/ouwttsgq | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | ouwttsgq | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-09-30T20:11:52.143790Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDDDMNWROCITPP | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/bnjgaaqy | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | bnjgaaqy |
|
|
| | eventTime $.raw_event.eventTime + | 2024-07-31T20:11:52.143800Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 236.7.239.43 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-4cbe6a36 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-4cbe6a36 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-08-22T20:11:52.143856Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 58 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 51 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 948 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3662 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1724 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-4cbe6a36 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | a620bc54-ce76-4f74-a777-0bd1a074e2dc | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 92 |
92 |
2024-04-05 20:11:52.144003 +00:00 |
StopInstances |
eu-west-1 |
192.88.48.78 |
hxtuemmv |
i-95d192e3 |
AIDWJPEQGTZOPYZ |
2a5f43d2-f0b2-494a-8c0b-9f72abf970b3 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDWJPEQGTZOPYZ | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/hxtuemmv | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | hxtuemmv | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-02-15T20:11:52.143989Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDOHMYVJLRFYPP | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/ohuvkbaw | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | ohuvkbaw |
|
|
| | eventTime $.raw_event.eventTime + | 2024-04-05T20:11:52.144003Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 192.88.48.78 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-95d192e3 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-95d192e3 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-09-01T20:11:52.144063Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 47 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 250 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 836 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3621 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3374 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-95d192e3 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 2a5f43d2-f0b2-494a-8c0b-9f72abf970b3 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 93 |
93 |
2024-03-19 20:11:52.144208 +00:00 |
StopInstances |
us-west-2 |
160.149.118.221 |
osqwrrys |
i-a0dc6d71 |
AIDKBIWMRVFHXDT |
243ef27b-3906-4369-92cb-6678b36d8948 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDKBIWMRVFHXDT | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/osqwrrys | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | osqwrrys | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-01-04T20:11:52.144196Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDJXAPLGEVJFQO | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/abysopnz | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | abysopnz |
|
|
| | eventTime $.raw_event.eventTime + | 2024-03-19T20:11:52.144208Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 160.149.118.221 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-a0dc6d71 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-a0dc6d71 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-08-29T20:11:52.144267Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 53 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 307 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 229 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4282 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4585 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-a0dc6d71 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 243ef27b-3906-4369-92cb-6678b36d8948 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 94 |
94 |
2022-12-16 20:11:52.144436 +00:00 |
StopInstances |
us-east-1 |
96.132.85.141 |
bssydlxh |
i-c46e285b |
AIDCZHGSQQDDWCU |
91218a8a-2ddb-4d05-9e6f-76afc6e7f311 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDCZHGSQQDDWCU | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/bssydlxh | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | bssydlxh | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2023-02-12T20:11:52.144425Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDXWRBQBSINKOB | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/eobcxczc | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | eobcxczc |
|
|
| | eventTime $.raw_event.eventTime + | 2022-12-16T20:11:52.144436Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 96.132.85.141 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-c46e285b |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-c46e285b | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-09-18T20:11:52.144496Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 30 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 418 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 961 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 3561 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4016 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-c46e285b | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 91218a8a-2ddb-4d05-9e6f-76afc6e7f311 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 95 |
95 |
2024-07-28 20:11:52.144654 +00:00 |
StartInstances |
us-east-1 |
89.231.155.6 |
itaaysnd |
i-a028d483 |
AIDAIFVYQMVECYZ |
838a2d8a-454a-4378-91ac-b5d206d5a4cc |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDAIFVYQMVECYZ | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/itaaysnd | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | itaaysnd | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-01-10T20:11:52.144645Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDEESSSKBQCHLJ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/mlzjrrlb | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | mlzjrrlb |
|
|
| | eventTime $.raw_event.eventTime + | 2024-07-28T20:11:52.144654Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 89.231.155.6 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-a028d483 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-a028d483 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2022-07-17T20:11:52.144712Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 19 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 21 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 539 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2275 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3187 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-a028d483 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 838a2d8a-454a-4378-91ac-b5d206d5a4cc | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 96 |
96 |
2023-04-13 20:11:52.144836 +00:00 |
RebootInstances |
eu-west-1 |
65.95.217.142 |
wgecxdhx |
i-9a836aee |
AIDLRXLCILUZSFV |
88fff36d-c2e7-480a-8831-161d5f12c488 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDLRXLCILUZSFV | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/wgecxdhx | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | wgecxdhx | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-10-29T20:11:52.144828Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDQVMERUZHIQKC | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/fruevqdf | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | fruevqdf |
|
|
| | eventTime $.raw_event.eventTime + | 2023-04-13T20:11:52.144836Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | RebootInstances | | awsRegion $.raw_event.awsRegion + | eu-west-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 65.95.217.142 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-9a836aee |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-9a836aee | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2025-01-21T20:11:52.145076Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 21 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 121 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 177 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4779 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 3376 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-9a836aee | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 88fff36d-c2e7-480a-8831-161d5f12c488 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 97 |
97 |
2022-12-13 20:11:52.145399 +00:00 |
StopInstances |
us-west-2 |
127.132.59.73 |
zjinimod |
i-26e2a909 |
AIDKSLFLDIZZHNX |
7506e5d5-23eb-4ceb-8ded-19894d5cff1d |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDKSLFLDIZZHNX | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/zjinimod | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | zjinimod | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2024-01-03T20:11:52.145382Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDVMJXEAVHHKEY | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/uzptadxg | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | uzptadxg |
|
|
| | eventTime $.raw_event.eventTime + | 2022-12-13T20:11:52.145399Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 127.132.59.73 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-26e2a909 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | true | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-26e2a909 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2024-12-30T20:11:52.145489Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 55 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 269 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 940 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2389 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 1131 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-26e2a909 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 7506e5d5-23eb-4ceb-8ded-19894d5cff1d | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | true | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 98 |
98 |
2023-04-11 20:11:52.145745 +00:00 |
StartInstances |
us-east-1 |
86.112.16.243 |
pagugqam |
i-15d9c41d |
AIDLYUGGARHLIYT |
c26b1fea-92aa-46a7-9a3c-0cb1f403805e |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDLYUGGARHLIYT | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/pagugqam | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | pagugqam | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | true | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2025-03-06T20:11:52.145730Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDQCGBXLKRZLPJ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/aghvfwke | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | aghvfwke |
|
|
| | eventTime $.raw_event.eventTime + | 2023-04-11T20:11:52.145745Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StartInstances | | awsRegion $.raw_event.awsRegion + | us-east-1 | | sourceIPAddress $.raw_event.sourceIPAddress + | 86.112.16.243 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-15d9c41d |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-15d9c41d | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2025-04-08T20:11:52.145826Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 100 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 320 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 954 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4604 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 2620 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-15d9c41d | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | c26b1fea-92aa-46a7-9a3c-0cb1f403805e | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 99 |
99 |
2025-01-21 20:11:52.146077 +00:00 |
StopInstances |
us-west-2 |
81.1.248.118 |
ygxazgzq |
i-cb7381d8 |
AIDPGOCRELXRVFX |
86139105-a5e5-476a-b202-33ece207b229 |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDPGOCRELXRVFX | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/ygxazgzq | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | ygxazgzq | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-12-31T20:11:52.146061Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDAPVTXKJDMGKJ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/binifxuj | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | binifxuj |
|
|
| | eventTime $.raw_event.eventTime + | 2025-01-21T20:11:52.146077Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 81.1.248.118 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-cb7381d8 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-cb7381d8 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-05-16T20:11:52.146155Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 48 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 289 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 378 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 2006 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4711 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-east-1::instance/i-cb7381d8 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 86139105-a5e5-476a-b202-33ece207b229 | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | true |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|
| 100 |
100 |
2023-10-28 20:11:52.146405 +00:00 |
StopInstances |
us-west-2 |
212.144.139.6 |
azqcuyhf |
i-594a5693 |
AIDYBQDWFGYJVUQ |
59dade8e-7485-4028-9b9e-96dda5fba28f |
[+] raw_event {}| Key | Value |
|---|
| eventVersion $.raw_event.eventVersion + | 1.08 | | userIdentity $.raw_event.userIdentity | [+] userIdentity {}| Key | Value |
|---|
| type $.raw_event.userIdentity.type + | IAMUser | | principalId $.raw_event.userIdentity.principalId + | AIDYBQDWFGYJVUQ | | arn $.raw_event.userIdentity.arn + | arn:aws:iam::123456789012:user/azqcuyhf | | accountId $.raw_event.userIdentity.accountId + | 123456789012 | | userName $.raw_event.userIdentity.userName + | azqcuyhf | | sessionContext $.raw_event.userIdentity.sessionContext | [+] sessionContext {}| Key | Value |
|---|
| attributes $.raw_event.userIdentity.sessionContext.attributes | [+] attributes {}| Key | Value |
|---|
| mfaAuthenticated $.raw_event.userIdentity.sessionContext.attributes.mfaAuthenticated + | false | | creationDate $.raw_event.userIdentity.sessionContext.attributes.creationDate + | 2022-10-17T20:11:52.146389Z |
| | sessionIssuer $.raw_event.userIdentity.sessionContext.sessionIssuer | [+] sessionIssuer {}| Key | Value |
|---|
| type $.raw_event.userIdentity.sessionContext.sessionIssuer.type + | Role | | principalId $.raw_event.userIdentity.sessionContext.sessionIssuer.principalId + | AIDPTSNSMGRXZHJ | | arn $.raw_event.userIdentity.sessionContext.sessionIssuer.arn + | arn:aws:iam::123456789012:role/djikpmec | | accountId $.raw_event.userIdentity.sessionContext.sessionIssuer.accountId + | 123456789012 | | userName $.raw_event.userIdentity.sessionContext.sessionIssuer.userName + | djikpmec |
|
|
| | eventTime $.raw_event.eventTime + | 2023-10-28T20:11:52.146405Z | | eventSource $.raw_event.eventSource + | ec2.amazonaws.com | | eventName $.raw_event.eventName + | StopInstances | | awsRegion $.raw_event.awsRegion + | us-west-2 | | sourceIPAddress $.raw_event.sourceIPAddress + | 212.144.139.6 | | requestParameters $.raw_event.requestParameters | [+] requestParameters {}| Key | Value |
|---|
| instancesSet $.raw_event.requestParameters.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.requestParameters.instancesSet.items | [+] items {}| Index | instanceId |
|---|
| 0 | i-594a5693 |
|
| | dryRun $.raw_event.requestParameters.dryRun + | false | | tags $.raw_event.requestParameters.tags | [+] tags {} | | extraDetails $.raw_event.requestParameters.extraDetails | [+] extraDetails {} |
| | responseElements $.raw_event.responseElements | [+] responseElements {}| Key | Value |
|---|
| instancesSet $.raw_event.responseElements.instancesSet | [+] instancesSet {}| Key | Value |
|---|
| items $.raw_event.responseElements.instancesSet.items | [+] items {}| Index | instanceId | currentState | previousState | status |
|---|
| 0 | i-594a5693 | | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].currentState.code + | 16 | | name $.raw_event.responseElements.instancesSet.items[0].currentState.name + | running |
| | Key | Value |
|---|
| code $.raw_event.responseElements.instancesSet.items[0].previousState.code + | 80 | | name $.raw_event.responseElements.instancesSet.items[0].previousState.name + | stopped |
| | Key | Value |
|---|
| checkTime $.raw_event.responseElements.instancesSet.items[0].status.checkTime + | 2023-08-10T20:11:52.146488Z | | metrics $.raw_event.responseElements.instancesSet.items[0].status.metrics | [+] metrics {}| Key | Value |
|---|
| cpu $.raw_event.responseElements.instancesSet.items[0].status.metrics.cpu + | 93 | | disk $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk | [+] disk {}| Key | Value |
|---|
| used $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.used + | 25 | | total $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.total + | 500 | | iops $.raw_event.responseElements.instancesSet.items[0].status.metrics.disk.iops + | 873 |
| | network $.raw_event.responseElements.instancesSet.items[0].status.metrics.network | [+] network {}| Key | Value |
|---|
| in $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.in + | 4741 | | out $.raw_event.responseElements.instancesSet.items[0].status.metrics.network.out + | 4635 |
|
|
|
|
|
| | resources $.raw_event.resources | [+] resources {}| Index | ARN | type |
|---|
| 0 | arn:aws:ec2:us-west-2::instance/i-594a5693 | AWS::EC2::Instance |
| | debugInfo $.raw_event.debugInfo | [+] debugInfo {}| Key | Value |
|---|
| traceId $.raw_event.debugInfo.traceId + | 59dade8e-7485-4028-9b9e-96dda5fba28f | | flags $.raw_event.debugInfo.flags | [+] flags {}| Key | Value |
|---|
| beta $.raw_event.debugInfo.flags.beta + | false | | test $.raw_event.debugInfo.flags.test + | false |
| | extra $.raw_event.debugInfo.extra | [+] extra {} |
|
|